CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Audacity 1.3.2 crea un directorio temporal con un nombre predecible sin validarción previa de la existencia de un directorio, lo cual permite a usuarios locales provocar denegación de servicio (grabación deadlock) a través de la creación del directorio antes de que Audacity esté funcionando. NOTA: este asunto podría solaparse con el borrado de archivos o directorios de su elección a través de un ataque de enlace simbólico.